CVE-2012-3569

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x...

9.3 HighPublic exploit

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.

Exploit likelihood

47.7%Down 34.9 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Record: CVE-2012-3569
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-134
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-3569
Updated: 2026-11-02

EUVDEUVD-2012-3516 No score

Record: EUVD-2012-3516
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8wg2-73cr-jv3q No score

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x...

Record: GHSA-8wg2-73cr-jv3q
Weakness: CWE-134
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	VMware OVF Tools - Format String (Metasploit) (1)	2013-02-06
Exploit-DB	VMware OVF Tools - Format String (Metasploit) (2)	2013-02-12
Metasploit	VMWare OVF Tools Format String Vulnerability	2012-11-08
Metasploit	VMWare OVF Tools Format String Vulnerability	2012-11-08

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-3569 is a high vulnerability (CVSS 9.3) in Vmware Ovf Tool, published November 14, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 47.7%, the 98th percentile. No source names a fixed version.